Can you use a physical security key for MFA when authenticating AWS CLI through the OP extension

Hi, I've got this setup https://developer.1password.com/docs/cli/shell-plugins/aws/ but am trying to figure out what I need to do if I use a Yubikey for MFA. I tried entering the ARN for the Yubikey but it doesn't seem to work. Anyone know if it has to be a virtual MFA with the code in the 1P entry for this to work?

1Password Version: 8.10.4
Extension Version: Not Provided
OS Version: macOS 13.2
Browser:_ Not Provided
Referrer: forum-search:https://1password.community/search?Search=aws%20cli%20with%20security%20key